openvpn: update to 2.5.2 15501/head
authorMagnus Kroken <mkroken@gmail.com>
Wed, 21 Apr 2021 20:45:03 +0000 (22:45 +0200)
committerMagnus Kroken <mkroken@gmail.com>
Thu, 22 Apr 2021 18:36:22 +0000 (20:36 +0200)
commit22b238998942112593afc4792358fa7a46ae228d
tree87b6b103745d80b45d2ef365000785d620a9a883
parentcf1ed852b912f6d601d727290e54a765f19e4c9b
openvpn: update to 2.5.2

Fixes two related security vulnerabilities (CVE-2020-15078) which
under very specific circumstances allow tricking a server using delayed
authentication (plugin or management) into returning a PUSH_REPLY before
the AUTH_FAILED message, which can possibly be used to gather
information about a VPN setup. In combination with "--auth-gen-token" or
a user-specific token auth solution it can be possible to get access to
a VPN with an otherwise-invalid account.

OpenVPN 2.5.2 also includes other bug fixes and improvements.

Add CI build test script.

Signed-off-by: Magnus Kroken <mkroken@gmail.com>
(cherry-picked from 6186fe732b058ef7f1ae43cce2184ba0c4d90184)
net/openvpn/Makefile
net/openvpn/patches/100-mbedtls-disable-runtime-version-check.patch
net/openvpn/patches/115-fix-mbedtls-without-renegotiation.patch [new file with mode: 0644]
net/openvpn/test.sh [new file with mode: 0755]